feat(db): mesh data model — meshes, members, invites, audit log

- pgSchema "mesh" with 4 tables isolating the peer mesh domain
- Enums: visibility, transport, tier, role
- audit_log is metadata-only (E2E encryption enforced at broker/client)
- Cascade on mesh delete, soft-delete via archivedAt/revokedAt

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

packages/api/src/modules/admin/router.ts

@@ -0,0 +1,26 @@
+import { Hono } from "hono";
+
+import { enforceAdmin, enforceAuth } from "../../middleware";
+
+import { getCustomersCount } from "./customers/queries";
+import { customersRouter } from "./customers/router";
+import { getOrganizationsCount } from "./organizations/queries";
+import { organizationsRouter } from "./organizations/router";
+import { getUsersCount } from "./users/queries";
+import { usersRouter } from "./users/router";
+
+export const adminRouter = new Hono()
+  .use(enforceAuth)
+  .use(enforceAdmin)
+  .route("/users", usersRouter)
+  .route("/organizations", organizationsRouter)
+  .route("/customers", customersRouter)
+  .get("/summary", async (c) => {
+    const [users, organizations, customers] = await Promise.all([
+      getUsersCount(),
+      getOrganizationsCount(),
+      getCustomersCount(),
+    ]);
+
+    return c.json({ users, organizations, customers });
+  });